Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/9bf1544b-0e9d-317d-9cc7-e389479204f4.roa
File:                     9bf1544b-0e9d-317d-9cc7-e389479204f4.roa (raw, json)
Hash identifier:          jhyoiArFAuHR0F8wMT3VUfOetB798qGmprs8itulRSI=
Subject key identifier:   7D:AA:5B:9B:2E:28:DE:10:E5:F4:81:70:FE:25:47:48:B9:52:22:FF
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F4328584F698D796D8192DA3E454D0B00
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/9bf1544b-0e9d-317d-9cc7-e389479204f4.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     36321
IP address blocks:        199.83.232.0/23 maxlen: 23
                          199.83.232.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:79:6d:81:92:da:3e:45:4d:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=d575dfa7-0aef-4c9b-be9b-b81acd38cdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:44:12:b4:4d:b3:35:e6:d8:86:79:d8:4a:03:
                    8c:a4:c4:d1:1f:81:b6:e0:1e:90:6e:4f:05:83:c2:
                    57:41:b9:ec:17:36:d8:a6:e9:85:30:5e:ec:79:fd:
                    ad:5d:a5:4b:6a:9a:d4:62:06:eb:33:51:eb:39:ee:
                    7b:05:04:1f:6f:f7:8f:9f:52:76:15:57:ca:89:87:
                    3e:e1:4f:3e:cb:d7:be:8a:5e:ca:ab:43:f9:91:02:
                    a8:3b:fb:cf:78:ba:28:ff:7a:b4:f7:9f:9b:36:86:
                    1a:a8:25:d5:c9:8d:77:46:9a:b5:4c:62:f1:e9:fc:
                    0c:74:48:5e:ac:60:97:7e:8a:8a:c2:17:38:3c:88:
                    af:84:ea:db:cc:58:f5:7a:8a:0d:1c:9e:0e:7a:43:
                    72:1c:34:9b:03:18:a6:d1:de:cf:2e:c2:b7:db:95:
                    b0:37:3a:f9:6a:be:32:c7:29:71:a3:13:93:8c:c6:
                    7d:88:a1:80:14:26:13:8c:31:01:45:98:cc:b8:08:
                    37:fa:43:9a:32:88:c0:57:eb:8e:8d:ce:e6:b9:50:
                    67:c2:6d:59:78:a2:86:b2:53:54:29:89:a5:cd:d4:
                    7b:92:53:aa:34:9f:7d:8c:d9:9a:85:b4:da:91:62:
                    5f:69:4e:00:2a:ef:65:1d:54:9c:d5:05:1a:61:47:
                    f8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AA:5B:9B:2E:28:DE:10:E5:F4:81:70:FE:25:47:48:B9:52:22:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/9bf1544b-0e9d-317d-9cc7-e389479204f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d7:51:be:93:f1:f2:f7:ae:ed:8b:d0:72:6a:fa:50:b9:ed:
         3e:93:09:98:0e:26:70:f7:3a:87:03:58:bb:8a:4f:e2:32:c8:
         e4:e3:ff:bc:92:b4:c6:4d:4d:3b:0a:21:a1:ea:72:e2:1f:94:
         95:cd:e8:9b:6c:e4:eb:1c:1c:25:cf:1e:04:ab:b2:ba:aa:bc:
         b1:dd:1a:1b:9b:ab:6d:02:26:2e:b0:39:9d:3a:f6:92:9f:b3:
         9b:62:60:2b:8f:5b:9d:e5:71:d4:70:02:3d:8c:10:b3:65:d5:
         15:b4:96:0b:dc:4c:9c:89:51:11:0e:bc:ad:35:f9:94:a6:22:
         c0:3b:b7:80:4b:fc:63:bb:f2:d4:5a:3c:a8:cf:ad:fe:b0:04:
         91:5f:0f:4c:37:13:1d:9b:92:f7:91:2b:6b:f1:77:90:3d:21:
         57:dd:32:46:65:da:d0:c9:56:32:a5:c7:8b:e9:16:66:cb:cb:
         83:eb:58:99:ee:f1:b9:b4:9b:ea:10:d6:6e:2c:3c:70:41:c7:
         50:73:6e:d6:ab:db:42:0a:71:30:75:8b:8c:c2:d8:67:9e:c8:
         4c:4d:5c:ac:ca:b4:8f:ef:1d:c4:c7:01:12:3f:51:b8:33:15:
         45:e9:fd:c5:4a:13:e1:f2:d2:1c:8d:11:85:8e:88:be:09:3e:
         0b:90:88:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:24:01 2026 by rpki-client